You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@zeppelin.apache.org by Peter Schwarz <ps...@us.ibm.com> on 2016/05/25 00:08:49 UTC

TLS support

Does Zeppelin support TLS, in particular TLSv1.2?  If so, how is it
configured?

Thank you,
Peter Schwarz

Re: TLS support

Posted by Vinay Shukla <vi...@gmail.com>.

Peter,

Looks to me Zeppelin today does leverage underlying Jetty's configuration
to set

   1. SSL/TLS protocol versions
   2. Include & Exclude Ciphers

The fix is pretty simple, we will send a pull request soon.

Thanks,
Vinay




On Wed, May 25, 2016 at 8:08 AM, Peter Schwarz <ps...@us.ibm.com> wrote:

> Thanks Rohit, I saw that, but the question is specifically about TLSv1.2.
> The security scan that inspects all our machines says that the Zeppelin
> port (8080) does not support encryption with TLSv1.2. Is there a way to
> configure Zeppelin so that it supports this protocol? I have set
> zeppelin.ssl to "true", but left client authentication "false".
>
> Peter
>
>
> [image: Inactive hide details for rohit choudhary ---05/24/2016 09:33:47
> PM---Here's some information - https://github.com/apache/incub]rohit
> choudhary ---05/24/2016 09:33:47 PM---Here's some information -
> https://github.com/apache/incubator-zeppelin/tree/master/conf.
>
> From: rohit choudhary <rc...@gmail.com>
> To: users@zeppelin.apache.org
> Date: 05/24/2016 09:33 PM
> Subject: Re: TLS support
> ------------------------------
>
>
>
> Here's some information -
> *https://github.com/apache/incubator-zeppelin/tree/master/conf*
> <https://github.com/apache/incubator-zeppelin/tree/master/conf>.
>
> Thanks,
> Rohit.
>
> On Wed, May 25, 2016 at 5:38 AM, Peter Schwarz <*pschwarz@us.ibm.com*
> <ps...@us.ibm.com>> wrote:
>
>    Does Zeppelin support TLS, in particular TLSv1.2? If so, how is it
>    configured?
>
>    Thank you,
>    Peter Schwarz
>
>
>
>

Re: TLS support

Posted by Peter Schwarz <ps...@us.ibm.com>.

Thanks Rohit, I saw that, but the question is specifically about TLSv1.2.
The security scan that inspects all our machines says that the Zeppelin
port (8080) does not support encryption with TLSv1.2.  Is there a way to
configure Zeppelin so that it supports this protocol? I have set
zeppelin.ssl to "true", but left client authentication "false".

Peter




From:	rohit choudhary <rc...@gmail.com>
To:	users@zeppelin.apache.org
Date:	05/24/2016 09:33 PM
Subject:	Re: TLS support



Here's some information -
https://github.com/apache/incubator-zeppelin/tree/master/conf.

Thanks,
Rohit.

On Wed, May 25, 2016 at 5:38 AM, Peter Schwarz <ps...@us.ibm.com> wrote:
  Does Zeppelin support TLS, in particular TLSv1.2? If so, how is it
  configured?

  Thank you,
  Peter Schwarz

Re: TLS support

Posted by rohit choudhary <rc...@gmail.com>.

Here's some information -
https://github.com/apache/incubator-zeppelin/tree/master/conf.

Thanks,
Rohit.

On Wed, May 25, 2016 at 5:38 AM, Peter Schwarz <ps...@us.ibm.com> wrote:

> Does Zeppelin support TLS, in particular TLSv1.2? If so, how is it
> configured?
>
> Thank you,
> Peter Schwarz
>
>